Baja
CVE-2026-35193
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 307
Restablecer filtros
Baja
CVE-2026-8404
Django: UpdateCacheMiddleware may disclose cached responses due to case-sensitive Cache-Control handling
Baja
CVE-2026-7666
Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake
Baja
CVE-2026-6873
Django: signed cookies are vulnerable to salt namespace collisions
Baja
CVE-2026-48587
Django: has_vary_header may expose cached responses when Vary values contain whitespace
Alta
ghsa-mw8f-w6p8-xrf4
wger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=None
Alta
CVE-2026-42860
edx-enterprise has SSRF via SAML metadata URL in sync_provider_data endpoint
Media
CVE-2026-41654
Weblate Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url
Media
CVE-2026-86256
wger: trainer_login open redirect - ?next= parameter not validated against host
Crítica
CVE-2026-43948
wger: cross-tenant password reset and plaintext disclosure via gym=None bypass
Crítica
CVE-2026-42196
django-s3file is vulnerable to relative path traversal
Baja
CVE-2026-6907
Django Uses Cache Containing Sensitive Information
Media
CVE-2026-5766
Django has an Improper Handling of Length Parameter Inconsistency
Baja
CVE-2026-35192
Django Uses Persistent Cookies Containing Sensitive Information
Baja
CVE-2026-4292
Django vulnerable to privilege abuse in ModelAdmin.list_editable
Baja
CVE-2026-4277
Django vulnerable to privilege abuse in GenericInlineModelAdmin
Alta
CVE-2026-3902
Django vulnerable to ASGI header spoofing via underscore/hyphen conflation
Alta
CVE-2026-33034
Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limit
Media
CVE-2026-33033
Django has potential DoS via MultiPartParser through crafted multipart uploads
Baja
CVE-2026-34203
Nautobot: Management of users via REST API does not apply configured password validators
Media
CVE-2026-34231
Slippers Vulnerable to Cross-Site Scripting (XSS) in `attrs` Template Tag
Alta
CVE-2026-28490
Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle
Alta
CVE-2026-30244
Plane is Vulnerable to Unauthenticated Workspace Member Information Disclosure
Media
CVE-2026-28222
Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.